Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

vice.com

Post reply on HN
Print view View original

201–210 of 375 posts

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#201

Post by Ididntdothis »

ilikehurdles wrote: post #43
leggomylibro wrote: post #19

Earlier quoted context omitted.

It's past time for us to get serious and apply HIPAA-style protection to the storage and transmission of PII, without exemptions. Companies like Facebook will complain loudly that they won't be able to survive, but that is not our problem. If we pass legislation with teeth, they will need to change their business model. That would be the point.

Zoom has allegedly HIPAA-compliant BAAs with users in the health space. If any PHI data is making it over to Facebook without a similar agreement from Facebook, Zoom is in for some trouble.

I am working on adding a Zoom client to a medical device right now :)

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#202

Post by SlowRobotAhead »

Legogris wrote: post #184
doctor_eval wrote: post #90

Earlier quoted context omitted.

Why do comments suggesting that data collection is paid for by Facebook/google get downvoted? Serious question. This wasn’t my comment but I think it’s true and I’ve said the same previously and was downvoted too. Is it because it’s obvious and well known? Did I miss the memo too? If Facebook is encouraging the capture and transmission of this data and paying for it, does this mean that Facebook has indemnified Zoom?

The GP is easy to interpret as justifying or excusing the behavior. Something being profitable doesn't suddenly make it OK.

If didn’t say or imply it was ok.

I ASKED if it was a revenue stream.

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#203

Post by proactivesvcs »

sneak wrote: post #13

Reminder: The NextDNS iOS app allows you to monitor and block these types of requests from all of your apps, via their DNS logging/filtering. (You can also configure the retention on the DNS logging, so as to not cause more toxic waste data.) I can't recommend it enough. Until/unless we get something like Little Snitch for the phone (are you listening, Apple?!), this is the next best thing.

Blokada has a similar feature set, with support for bundled advert/spyware/social media block lists as well as your own.

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#204

Post by gentleman11 »

1over137 wrote: post #154
gentleman11 wrote: post #149

So what options do we have for private video conferencing?

jitsi-meet, see: https://meet.jit.si/ https://github.com/jitsi/jitsi-meet You can self-host it, or use the first link. No need to give your email, name, or phone number.

Are there any tricks to hosting it correctly, or is it pretty fool proof?

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#205

Post by _cyrus »

leggomylibro wrote: post #19
godelski wrote: post #2

> There is nothing in the privacy policy that addresses [that data is being sent to Facebook] > The Zoom app notifies Facebook when the user opens the app, details on the user's device such as the model, the time zone and city they are connecting from, which phone carrier they are using, and a unique advertiser identifier created by the user's device which companies can use to target a user with advertisements So Zoo…

It's past time for us to get serious and apply HIPAA-style protection to the storage and transmission of PII, without exemptions. Companies like Facebook will complain loudly that they won't be able to survive, but that is not our problem. If we pass legislation with teeth, they will need to change their business model. That would be the point.

A user agent is not PII

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#206

Post by tzs »

kasey_junk wrote: post #192
tzs wrote: post #178

Earlier quoted context omitted.

GDPR Article 79 [1]: > 1. Without prejudice to any available administrative or non-judicial remedy, including the right to lodge a complaint with a supervisory authority pursuant to Article 77, each data subject shall have the right to an effective judicial remedy where he or she considers that his or her rights under this Regulation have been infringed as a result of the processing of his or her personal data in non…

See article 78. There is an escalation path.

The way it is written makes it seem like 79 is independent of 77 and 78. You can pursue a claim through a supervisory authority (77) and if you are not happy with the result go to court (78), or you can go to court directly against the processor/controller (79), or maybe even do both.

79 specifically specifically says that pursuing a judicial remedy under it is without prejudice to any available administrative or non-judicial remedy, including the right to lodge an Article 77 complaint. If this was meant as something that has to come after not getting satisfaction from an Article 77 complaint it would make no sense to say it is without prejudice to the right to lodge an article 77 complaint since that would have already had to have been lodged before getting here.

This also fits with what I saw on assorted EU and international law firm blogs, back when they were all writing articles on what GDPR would mean.

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#207

Post by jdm2212 »

yalogin wrote: post #55

Why do people use zoom at all? I know big companies that use it. A little disconcerting that even large companies don’t ask the right questions or do the due diligence and when paying for it.

It actually works, which sadly makes it way above average.

I've had to switch off between WebEx, Zoom and Hangouts for the last month and Zoom is head and shoulders above the other two in terms of usability and call quality. And there's whatever Cisco's previous craptastic offering was (jabber?) which is far, far worse than any of those three.

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#208

Post by Legogris »

SlowRobotAhead wrote: post #202
Legogris wrote: post #184

Earlier quoted context omitted.

The GP is easy to interpret as justifying or excusing the behavior. Something being profitable doesn't suddenly make it OK.

If didn’t say or imply it was ok. I ASKED if it was a revenue stream.

And I didn’t say or imply I downvoted you. Do you think people downvote for fun? It’s not like your question was rhetorical right

(Sorry I’m going to stop being obnoxious now, hope you understand why it’s easy to read your comment as such!)

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#209

Post by kasey_junk »

tzs wrote: post #206
kasey_junk wrote: post #192

Earlier quoted context omitted.

See article 78. There is an escalation path.

The way it is written makes it seem like 79 is independent of 77 and 78. You can pursue a claim through a supervisory authority (77) and if you are not happy with the result go to court (78), or you can go to court directly against the processor/controller (79), or maybe even do both. 79 specifically specifically says that pursuing a judicial remedy under it is without prejudice to any available administrative or non…

:shrug: I’m not a GDPR lawyer and further most of it doesn’t have precedent yet so we aren’t sure how its going to fall out.

I did work on a GDPR compliance effort in an industry where it is big important (real time bidding ads) and our lawyers, while hedging, were not at all worried about random lawsuits. Their opinion was that we would easily be able to submit to the courts that the complaints needed to go through the authorities first.

Re: Zoom iOS app sends data to Facebook even if you don’t have a Facebook account

#210

Post by valuearb »

AnthonyMouse wrote: post #195
ChrisMarshallNY wrote: post #113

Earlier quoted context omitted.

I'm wondering why this post was so unpopular. It wasn't meant to be offensive or judgmental, in any way at all.

It's because Apple is one of the largest companies in the world and can survive a "backlash" much to the chagrin of small developers already subject to their mercurial policies. So the idea that that's what's stopping them doesn't really mesh with the reality that if it was, it would be stopping them from doing half the things they already do.

Banning 90% of the apps on the store until they remove the Facebook login SDK would cause a backlash much bigger than from a group of small developers.
Post reply on HN